Revolut Regulation

1/ Bank of Lithuania

The Bank of Lithuania draws its authority from Lithuanian banking law, itself derived from EU directives. Revolut applied for a banking licence in November 2017, and this authority granted Revolut Bank UAB a specialised licence in 2021 — one that, thanks to EU passporting rules, lets Revolut operate across the entire EEA from its Lithuanian base. In exercising this role, the Bank of Lithuania aims to safeguard prudential stability and protect depositors. Its main weakness lies in capacity: a comparatively small national regulator bears formal responsibility for supervising a pan-European fintech serving tens of millions of customers, a mismatch that the ECB's 2024 takeover of direct supervision only made more visible.

2/ European Central Bank (ECB)

The ECB's authority stems from the Single Supervisory Mechanism Regulation, which allows it to take over direct prudential supervision of banks deemed significant within the euro area. On this basis, the ECB assumed direct oversight of Revolut's EU banking subsidiary in January 2024, once the entity's rapid growth pushed it past the significance threshold. Its purpose is to ensure consistent, high-quality prudential oversight across the eurozone rather than leaving systemically relevant institutions to national regulators of uneven capacity. Its weakness lies in timing and legitimacy: the ECB only stepped in once Revolut had already reached a scale where national supervision was arguably no longer adequate, exposing a structural lag between an institution's growth and its being brought under proportionate oversight.

3/ Financial Action Task Force (FATF)

The FATF derives its authority not from binding law but from its status as an intergovernmental standard-setter, whose 40 Recommendations on anti-money laundering are transposed into national and EU law rather than directly enforceable themselves. Its aim is to protect the integrity of the global financial system by curbing money laundering and terrorist financing, pushing entities like Revolut to maintain robust KYC systems. Its central weakness is enforcement: the FATF has no sanctioning power of its own and relies entirely on national financial intelligence units of uneven capacity, a gap made concrete by reports alleging Revolut failed to flag a significant volume of suspicious transactions.

4/ Visa/Mastercard

Unlike the previous institutions, Visa and Mastercard derive their authority purely from contract: card issuers and acquirers must accept their private Operating Regulations to access the network. For Revolut, this membership is what makes its card products usable worldwide, so its purpose is essentially technical — ensuring interoperability and security. The weakness lies precisely there: there is no public accountability mechanism. The networks set and enforce their own rules unilaterally, sanctions are limited to contractual exclusion rather than judicial recourse, and the duopolistic structure leaves Revolut little real bargaining power over the terms it must accept.

Bibliography :

Le Monde, « Revolut, la banque britannique à l'assaut de la jeunesse mondialisée »

Le Monde, « Revolut, la surdouée des néobanques sème le trouble »

Le Monde, « Revolut annonce l'obtention d'une licence bancaire en France »

Le Monde, « La banque en ligne britannique Revolut se dit victime d'"une escroquerie sophistiquée", des données clients compromises »

Financial Times, "Hackers demand Revolut pay $3mn ransom after data breach"

Revolut Help Centre, "Which authority is Revolut Securities Europe UAB regulated by?", available at: https://help.revolut.com/en-NL/help/wealth/stocks/more-help-with-stocks/investment-protection/which-authority-is-revolut-securities-europe-uab-regulated-by/